Privacy Policy

1. Data Controller

  • Responsible: The WhiteTeam Consulting, S.L.
  • CIF: ESB86455748
  • Address: Ronda de Poniente, 15 – 28760 Tres Cantos (Madrid), Spain
  • Offices: Madrid and Bilbao
  • Email DPO: gdpr@twtspain.com

2. Purposes of the processing

We process your personal data for the following purposes:

  • Handling contact requests: responding to inquiries sent via the contact form or email.
  • Business relationship: managing the pre-contractual and contractual relationship with clients and suppliers.
  • Sending commercial communications: only if the user has given their express consent.
  • Staff selection: managing applications received through the website.
  • Service improvement: statistical analysis and improvement of the user experience on the website.

3. Legal basis

  • Consent of the interested party (art. 6.1.a GDPR) for the sending of commercial communications and the collection of data through forms.
  • Performance of a contract (art. 6.1.b GDPR) for the management of the business relationship.
  • Legitimate interest (art. 6.1.f GDPR) for the improvement of the service and analysis of website usage.

4. Data retention

The data will be kept for the time necessary to fulfill the purpose for which it was collected and to determine any potential liabilities arising therefrom. Specifically:

  • Business contact information: for as long as there is mutual interest or a current contractual relationship, and at least for the legally required periods (5 years according to the General Tax Law).
  • Candidate data: maximum 24 months from receipt, unless consent is given for longer retention.
  • Web analytics data: in accordance with the duration indicated in the Cookie Policy.

5. Recipients

No data will be transferred to third parties, except where legally required. Data processors providing services to TWT (hosting, CRM, management tools), with whom the corresponding data processing agreements have been signed in accordance with Article 28 of the GDPR, may have access to the data.

6. International Transfers

Personal data collected through this website is stored on servers located within the European Economic Area (EEA).

In the event that any data processor is located outside the EEA, TWT guarantees that appropriate safeguards are applied in accordance with Chapter V of the GDPR, including:

  • Adequacy decisions of the European Commission (Art. 45 GDPR).
  • Standard Contractual Clauses (SCCs) approved by the European Commission (art. 46.2.c GDPR).
  • Transfer impact assessments (TIAs) when necessary.

You can request detailed information about international transfers by writing to gdpr@twtspain.com.

7. Rights of the interested party

You can exercise your rights of access, rectification, erasure, restriction of processing, portability and objection by contacting:

  • Email: gdpr@twtspain.com
  • Postal address: Ronda de Poniente, 15 – 28760 Tres Cantos (Madrid)

TWT undertakes to respond to requests to exercise rights within a maximum period of one month from receipt of the request, in accordance with art. 12.3 GDPR.

You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

8. Security measures

TWT has adopted the necessary technical and organizational measures to guarantee the security of personal data and prevent its alteration, loss, unauthorized processing or access, in accordance with the state of the art, the nature of the data and the risks to which it is exposed, in accordance with the provisions of the GDPR and the LOPDGDD. These measures include encryption in transit (TLS 1.3), role-based access control, periodic audits and staff training.

9. Consent Record

In accordance with the principle of proactive responsibility (Art. 5.2 GDPR), TWT records the consent given by users, including the date, time, version of the policy accepted and the origin of the request. This record is kept as proof of compliance.